node_modules/koa/package.json UNKNOWN
Verdict: BENIGN
▴
Local reference
Suspicious dependency
Inferred
Content
Traits
Provenance
package.json
package.json
1
{
2
" name" : "koa" ,
package.json defines a package name
3
" version" : "2.16.4" ,
package.json defines a package version
4
"publishConfig" : {
5
"acces s" : "public" ,
npm package is configured for public publishing
6
"tag" : "latest-2"
7
},
8
"description" : "Koa web app framework" ,
9
"main" : "lib/application.js" ,
10
" exports" : {
11
"." : {
12
"require" : "./lib/application.js" ,
13
"import" : "./dist/koa.mjs"
14
},
15
"./lib/request" : "./lib/request.js" ,
16
"./lib/request.js" : "./lib/request.js" ,
17
"./lib/response" : "./lib/response.js" ,
18
"./lib/response.js" : "./lib/response.js" ,
19
"./lib/applic…
25:18
… "./package.json" ,
26
"./package.json" : "./package.json"
27
},
28
" reposito ry" : "koajs/koa" ,
Repository uses owner/project coordinate
29
"license" : "MIT" ,
30
"dependencies" : {
Package has at least eight runtime deps
31
"accepts" : "^1.3.5" ,
32
"cache-content-type" : "^1.0.0" ,
33
"content-disposition" : "~0.5.2" ,
34
"content-type" : "^1.0.4" ,
35
"cookies" : "~0.9.0" ,
36
"debug" : "^4.3.2" ,
37
"delegates" : "^1.0.0" ,
38
"depd" : "^2.0.0" ,
39
"destroy" : "^1.0.4" ,
40
"encodeurl" : "^1.0.2" ,
41
"escape-html" : "^1.0.3" ,
42
"fresh" : "~0.5.2" ,
43
…
52:23
… 6 ",
53
"vary" : "^1.1.2"
54
},
55
" devDependencies" : {
56
"eslint" : "^7.32.0" ,
57
"eslint-config-koa" : "^2.0.0" ,
58
"eslint-config-standard" : "^16.0.3" ,
59
"eslint-plugin-import" : "^2.18.2" ,
60
"eslint-plugin-node" : "^11.1.0" ,
61
"eslint-plugin-promise" : "^5.1.0" ,
62
"eslint-plugin-standard" : "^5.0.0" ,
63
"gen-esm-wrapper" : "^1.0.6" ,
64
"jest" : "^27.0.6" ,
65
"supertest" : "^3.1.0"
66
},
67
"engines" : {
68
"node" : "^4.8.4 || ^6.10.1 || ^7.10.1 || >= 8.1.4"
69
},
70
"files" : [
71
"dist" ,
72
"lib"
73
],
74
"jest" : {
75
"testEnvironment" : "node"
76
}
77
}
Objectives
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
1 match
25:18
… "./package.json" ,
26
"./package.json" : "./package.json"
27
},
28
" repository" : "koajs/koa" ,
29
"license" : "MIT" ,
30
"dependencies" : {
31
"accepts" : "^1.3.5" ,
32
"cache-content-type" : "^1.0.0" ,
33
"content-disposition" : "~0.5.2" ,
34
"content-type" : "^1.0.4" ,
35
"cookies" : "~0.9.0" ,
36
"debug" : "^4.3.2" ,
37
"delegates" : "^1.0.0" ,
38
"depd" : "^2.0.0" ,
39
"destroy" : "^1.0.4" ,
40
"encodeurl" : "^1.0.2" ,
41
"escape-html" : "^1.0.3" ,
42
"fresh" : "~0.5.2" ,
43
…
Metadata
notable severity, 85% confident.
package/dependencies
Package has at least eight runtime deps
2 matches
52:23
… 6 ",
53
"vary" : "^1.1.2"
54
},
55
" devDependencies" : {
56
"eslint" : "^7.32.0" ,
57
"eslint-config-koa" : "^2.0.0" ,
58
"eslint-config-standard" : "^16.0.3" ,
59
"eslint-plugin-import" : "^2.18.2" ,
60
"eslint-plugin-node" : "^11.1.0" ,
61
"eslint-plugin-promise" : "^5.1.0" ,
62
"eslint-plugin-standard" : "^5.0.0" ,
63
"gen-esm-wrapper" : "^1.0.6" ,
64
"jest" : "^27.0.6" ,
65
"supertest" : "^3.1.0"
66
},
67
"engines" : {
68
"node" : "^4.8.4 || ^6.10.1 || ^7.10.1 || >= 8.1.4"
69
},
70
"files" : [
71
"dist" ,
72
"lib"
73
],
74
"jest" : {
75
"testEnvironment" : "node"
76
}
77
}
25:18
… "./package.json" ,
26
"./package.json" : "./package.json"
27
},
28
"repository" : "koajs/koa" ,
29
"license" : "MIT" ,
30
"dependencies" : {
31
"accepts" : "^1.3.5" ,
32
"cache-content-type" : "^1.0.0" ,
33
"content-disposition" : "~0.5.2" ,
34
"content-type" : "^1.0.4" ,
35
"cookies" : "~0.9.0" ,
36
"debug" : "^4.3.2" ,
37
"delegates" : "^1.0.0" ,
38
"depd" : "^2.0.0" ,
39
"destroy" : "^1.0.4" ,
40
"encodeurl" : "^1.0.2" ,
41
"escape-html" : "^1.0.3" ,
42
"fresh" : "~0.5.2" ,
43
…
notable severity, 90% confident.
package/manifest
Repository uses owner/project coordinate
3 matches
25:18
… "./package.json" ,
26
"./package.json" : "./package.json"
27
},
28
" repository" : "koajs/koa" ,
29
"license" : "MIT" ,
30
"dependencies" : {
31
"accepts" : "^1.3.5" ,
32
"cache-content-type" : "^1.0.0" ,
33
"content-disposition" : "~0.5.2" ,
34
"content-type" : "^1.0.4" ,
35
"cookies" : "~0.9.0" ,
36
"debug" : "^4.3.2" ,
37
"delegates" : "^1.0.0" ,
38
"depd" : "^2.0.0" ,
39
"destroy" : "^1.0.4" ,
40
"encodeurl" : "^1.0.2" ,
41
"escape-html" : "^1.0.3" ,
42
"fresh" : "~0.5.2" ,
43
…
1
{
2
"name" : "koa" ,
3
"version" : "2.16.4" ,
4
"publishConfig" : {
5
"access" : "public" ,
6
"tag" : "latest-2"
7
},
8
"description" : "Koa web app framework" ,
9
"main" : "lib/application.js" ,
10
" exports" : {
11
"." : {
12
"require" : "./lib/application.js" ,
13
"import" : "./dist/koa.mjs"
14
},
15
"./lib/request" : "./lib/request.js" ,
16
"./lib/request.js" : "./lib/request.js" ,
17
"./lib/response" : "./lib/response.js" ,
18
"./lib/response.js" : "./lib/response.js" ,
19
"./lib/applic…
baseline severity, 100% confident.
package
package.json defines a package version
1 match
1
{
2
"name" : "koa" ,
3
" version" : "2.16.4" ,
4
"publishConfig" : {
5
"access" : "public" ,
6
"tag" : "latest-2"
7
},
8
"description" : "Koa web app framework" ,
9
"main" : "lib/application.js" ,
10
"exports" : {
11
"." : {
12
"require" : "./lib/application.js" ,
13
"import" : "./dist/koa.mjs"
14
},
15
"./lib/request" : "./lib/request.js" ,
16
"./lib/request.js" : "./lib/request.js" ,
17
"./lib/response" : "./lib/response.js" ,
18
"./lib/response.js" : "./lib/response.js" ,
19
"./lib/applic…
baseline severity, 100% confident.
package/quality
package.json defines a package name
1 match
1
{
2
" name" : "koa" ,
3
"version" : "2.16.4" ,
4
"publishConfig" : {
5
"access" : "public" ,
6
"tag" : "latest-2"
7
},
8
"description" : "Koa web app framework" ,
9
"main" : "lib/application.js" ,
10
"exports" : {
11
"." : {
12
"require" : "./lib/application.js" ,
13
"import" : "./dist/koa.mjs"
14
},
15
"./lib/request" : "./lib/request.js" ,
16
"./lib/request.js" : "./lib/request.js" ,
17
"./lib/response" : "./lib/response.js" ,
18
"./lib/response.js" : "./lib/response.js" ,
19
"./lib/applic…
component severity, 95% confident.
package/files
Filename is package.json
1 match
0
{
"name" : "koa" ,
"version" : "2.16.4" ,
"publishConfig" : {
"access" : "public" ,
"tag" : "latest-2"
},
"description" : "Koa web app framework" ,
"main" : "lib/application.js" ,
"exports" : {
"." : {
"require" : "./lib/application.js" ,
"import" : "./dist/koa.mjs"
},
"./lib/request" : "./lib/request.js" ,
"./lib/request.js" : "./lib/request.js" ,
"./lib/response" : "./lib/response.js" ,
"./lib/response.js" : "./lib/response.js" ,
"./lib/applic
Identity
SHA-256
c20d94a38acf1b51c2dde7c4755343031fb7474a7b7fc9210790f4b0dfa43a7c
Filename
node_modules/koa/package.json
Origin
Source
x
Feed
aur.archlinux.org
Ecosystem
arch
Timeline
First seen
19 Aug 2026 15:06 UTC
First analyzed
19 Aug 2026 15:08 UTC
Last analyzed
19 Aug 2026 15:27 UTC
Last updated
19 Aug 2026 15:25 UTC